[gridsite] Change setuid, same as debian now and better.

stevetraylen stevetraylen at fedoraproject.org
Tue Sep 21 23:39:51 UTC 2010


commit 8d3271be6b23e19ea18c1db9f4b7b121c6d77129
Author: Steve Traylen <steve.traylen at cern.ch>
Date:   Wed Sep 22 01:36:09 2010 +0200

    Change setuid, same as debian now and better.

 gridsite.spec   |    5 ++++-
 root-level.gacl |   23 +++++++++++++----------
 2 files changed, 17 insertions(+), 11 deletions(-)
---
diff --git a/gridsite.spec b/gridsite.spec
index a6c88ee..b3b5b3c 100644
--- a/gridsite.spec
+++ b/gridsite.spec
@@ -207,7 +207,7 @@ rm -rf $RPM_BUILD_ROOT
 
 %files gsexec
 %defattr(-,root,root,-)
-%attr(4510,root,apache) %{_sbindir}/gsexec
+%attr(4754,root,apache) %{_sbindir}/gsexec
 %{_mandir}/man8/gsexec.8.*
 
 %files libs
@@ -255,6 +255,9 @@ rm -rf $RPM_BUILD_ROOT
 - Add gridsite-include.patch 
   https://savannah.cern.ch/bugs/index.php?69632 
   https://bugzilla.redhat.com/show_bug.cgi?id=612109
+- Alter default .gacl
+  https://bugzilla.redhat.com/show_bug.cgi?id=612187
+- Change setuid binary from 4510 to 4754
 
 * Thu May 20 2010 Steve Traylen <steve.traylen at cern.ch> - 1.5.18-4
 - For .el4 use /usr/include/apr-0 rather than apr-1
diff --git a/root-level.gacl b/root-level.gacl
index 60d2eaf..2b03b42 100644
--- a/root-level.gacl
+++ b/root-level.gacl
@@ -1,12 +1,15 @@
 <?xml version="1.0"?>
- <gacl>
- <entry>
-   <any-user/>
-   <allow><list/><read/></allow>
- </entry>
- <entry>
-   <auth-user/>
-   <allow><read/><write/><list/><admin/></allow>
- </entry>
+<gacl version="0.9.0">
+<entry>
+<cred>
+<auri>gacl:any-user</auri>
+</cred>
+<allow><read/><list/></allow>
+</entry>
+<entry>
+<cred>
+<auri>gacl:auth-user</auri>
+</cred>
+<allow><read/><list/><write/><admin/></allow>
+</entry>
 </gacl>
-


More information about the scm-commits mailing list